Bug 1807686

Summary:	Utilization of the RDomain directive in sshd_config causes server to fail all subsequent connections
Product:	Red Hat Enterprise Linux 8	Reporter:	jcalhoun
Component:	openssh	Assignee:	Jakub Jelen <jjelen>
Status:	CLOSED ERRATA	QA Contact:	Ondrej Moriš <omoris>
Severity:	low	Docs Contact:
Priority:	medium
Version:	8.1	CC:	omoris, tmraz
Target Milestone:	rc	Keywords:	Patch, Triaged
Target Release:	8.0	Flags:	pm-rhel: mirror+
Hardware:	Unspecified
OS:	Linux
Whiteboard:
Fixed In Version:	openssh-8.0p1-5.el8	Doc Type:	No Doc Update
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2020-11-04 01:32:00 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Comment 1 Jakub Jelen 2020-02-27 09:12:25 UTC

The rdomain functionality is in openssh since openssh-7.6p1 so RHEL8 is the first RHEL release bringing this feature. The release notes [1] say that the rdomain keywords are supported also in the match blocks and ListenAddress, which should work also on Linux somehow.

I do not see this option documented in any Red Hat documentation (if you find it somewhere, please, let me know). It would probably make sense to update manual pages to explicitly list this as this work only in OpenBSD and probably make the option no-op in the configuration parsing already. I filled upstream bug with proposed patch.

[1] https://www.openssh.com/releasenotes.html

Comment 2 jcalhoun 2020-02-28 01:12:43 UTC

Hey Jakub,

Thank you for looking into this. I'll need to do some digging to see if the directive exists in any forward-facing Red Hat documentation, but this mainly arose from the existence of the directive without the specification for OpenBSD in our man pages for sshd_config that shipped with RHEL 8+. It seems you've already addressed this based on your last update. I'll let you know if I end up finding any mention of RDomain outside of the man pages. Thanks again!

Comment 6 Jakub Jelen 2020-03-23 07:22:33 UTC

Thank you for clarification.

Comment 14 errata-xmlrpc 2020-11-04 01:32:00 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (openssh bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:4439